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DETAILED ACTION 
Continued Examination Under 37 CFR 1. 1 14 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 3-6-06 
has been entered. 

2. This action is responding to RCE amended 3-6-2006. Claims 1 - 18 are pending. 
Claims 1, 6, 11 have been amended. Independent claims are 1, 6, 11. 

Response to Arguments 

3. Applicant's arguments filed 3/6/06 have been fully considered but they are not 
persuasive. 

3. 1 Applicant argues that the referenced prior art does not disclose, \..the ring 
configuration is between pnDcessors in the first system and is not linking various 
networked systems ..." (see Remarks Page 7, Lines 13-14) 
By definition, a system is, "... A group of related components that interact to 
perform a task. ... (http://www.answers.com/topic/system) The first 
processing system is merely a collection of processing systems interconnected 
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into a ring network (i.e. equivalent to specification) configuration with a single 
task. The task is to perform security services for an ISP. There is no mention of 
any type of inter-processor connections between each of the processors for a 
first or second processing system. There is a mention of the connections 
between processors within a ring. The term "ring network" is mentioned at ( ), is 
a secure connection between each processor. 

Each system has a processor and other components for the system (i.e. 
systems; CPU, memory, I/O interfaces (i.e. including network interfaces); blade 
type systems). Each system is connected to a network interface for network 
communications. The communications network is in the configuration of a ring. 

The Specification states numerous times, "... ring network ... "or network ring, 
(see Specification Page 8, Lines 27; Page 17, Lines 8; Page 17, Line 9) This 
indicates that the ring connections are network based. 

3.2 Applicant argues that the referenced prior art does not disclose, "... provide 
application layer services ..." (see Remarks Page 7, Lirie 9); " ... services 
provided are applicatior) layer services such as routing ..." (see Remarks Page 
7, Unes 17-18) 

The term "application layer" is not disclosed within the Specification or the set of 
original claims. The temri ""application" is not mentioned in the original claims. 
The tenn "application" \s mentioned in the specification on Page 12, Line 17, as a 
application programming interface, and on Page 15, Line 9, as providing IP 
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services. There is no mention of the term "application layer". This is new 
matter and as such will not be addressed. 

3.3 Applicant is reminded that the test for obviousness is not whether the features 
of a secondary reference may be bodily incorporated into the structure of the 
primary reference; nor is it that the claimed invention must be expressly 
suggested in any one or all of the references. Rather, the test is what the 
combined teachings of the references would have suggested to those of ordinary 
skill in the art. See In re Keller, 642 F.2d 413, 208 USPQ 871 (CCPA 1981). 
The rejection to each independent and dependent claim includes a citation from 
the referenced prior art that discloses the basis for the rejection. Each 
obviousness combination dearly indicates the claim limitation the combined 
reference prior art teaches. In addition, a cited passage from the referenced 
prior art dearly indicates the motivation for the obviousness combination. Each 
obviousness combination's disdosure is equivalent to the Applicant's daimed 
invention. 

3.4 The examiner has considered the applicant's remarks concerning a flexible 
system that allows a service provider to easily provide internet services, virtual 
private network services, firewall services or other security type services to a 
plurality of customers based on each customer individual changing needs. . 



1 
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Applicant's arguments have thus been fully analyzed and considered but they are 
not persuasive. 

After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting 
of Alles (6,466,976), deBoer (6,658,013), Rao (6,674,756) and Gamer 
(6,243,580) discloses the applicant's invention including disclosures in Remarks 
dated March 6, 2006. 

Double Patenting 

A. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timev>^ise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. See \n re Goodman, 1 1 
F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); in re Ljongi, 759 F.2d 887, 225 
USPQ 645 (Fed. Cir. 1985); In re Van Omum, 686 F.2d 937, 214 USPQ 761 (CCPA 
1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); and, In re Thorington, 
41 8 F.2d 528, 1 63 USPQ 644 (CCPA 1 969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) may be 
used to overcome an actual or provisional rejection based on a nonstatutory double 
patenting ground provided the conflicting application or patent is shown to be commonly 
owned with this application. See 37 CFR 1 .130 (b). 
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Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply 
with 37 CFR 3.73(b). 

5. Claims 1 - 18 are provisionally rejected under the judicially created doctrine of 
double patenting over claims 1 - 19 of copending Application No. 09/952,520 
(PGPUB: 20020152373). This is a provisional double patenting rejection since the 
conflicting claims have not yet been patented. 

The subject matter claimed in the instant application is fully disclosed in the 
referenced copending application and would be covered by any patent granted on that 
copending application since the referenced copending application and the instant 
application are claiming common subject matter, as follows: 

09/952,520 

Application: 09/661637 PGPUB: 2002/0152373 
Exemplary claim 1 Exemplary Claims 1, 2, 5 

However, PGPUB: 2002/0152373 does not explicitly disclose a secure connection, 
even though it would have been obvious to one of ordinary skill in the networking art to 
have utilized a secure connection. Since PGPUB: 2002/0152373 does state utilizing 
tunneling for securing traffic over a network as well as encrypting and decrypting 
packets from one node to another node. 
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Claim Rejection - 35 USC § 103 

* 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1, 6, 11, 13 - 18 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Alles et al. (U.S. Patent No. 6,466,976) in view of deBoer at al. (U.S. Patent No. 
6,658,013) and further in view of Rao (U.S. Patent No. 6,674,756). 

Regarding Claims 1, 6, 11, Alles discloses multiple processor utilizing a method and 
system of delivering security services, (see Alles col. 3, lines 24-28; col. 2, lines 37- 
43) But, Alles does not disclose a ring configuration. However, deBoer discloses: 

a) connecting a plurality of processors in a ring configuration within a first 
processing system; (see deBoer col. 4, lines 22-37) 

Alles does not disclose a secure connection between two ring configurations. 
However, deBoer discloses: 

b) establishing a secure connection between a second processing svstem and the 
first processing svstem across an internet protocol (IP) connection to form a 
tunnel; (see deBoer col. 4, lines 22-37) 

Alles discloses a method and system of delivering security services, (see 
Alles col. 2, lines 37-43) Alles discloses services processing at OSI layers at the 
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network layer and higher (i.e. application layer), (see Mies col. 4, lines 50-53) 
Alles does not specifically disclose processing at the application layer. 
Additionally, Alles does not disclose a ring configuration for processors (a first 
processing system) or two ring configurations (a first and second processing 
system) connected by a tunnel (i.e. network path). However, deBoer does 
disclose a ring configuration for connected processors, two ring configurations 
connected by a tunnel (i.e. network path). And, Rao discloses services 
processing specifically at the application layer for a customer : 
c) routing messages from the second processing system via the first processing 
system (see deBoer col. 4. lines 22-37: processing rings) providing [both router 
services and host] application layer (see Rao col. 21, lines 14-18: processing at 
the application layer) services for a customer [using] usino at least one processor 
selected from the plurality of processors in the first processinc svstem's ring 
configuration and using the second processing system, (see Alles col. 2, lines 
27-39; col. 3, lines 24-26; col. 2, lines 44-48). But, deBoer does not disclose 
service provider services (i.e. routing and hosting). However, Alles does disclose 
service provider services such as routing and hosting. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize a two ring configuration connected by a 
tunnel (network path) in the processing of subscriber services as taught by deBoer, 
and to utilize application layer processing for the delivery of services as taught by 
Rao. One of ordinary skill in the art would be motivated to employ deBoer and Rao 
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in order to provide expanded and updated features and services to subscribers (see 
deBoer col. 4, lines 12-17:"... provide a method and apparatus for eriabling the 

I 

survivability of interhr^g traffic which is faster, more bandwidth efficient and better 
integrated ..."). and (see Rao col. 2, lines 6-12:"... fault-tolerant and efficient 
services that will accommodate the increase in the number and the variety of 
network traffic ... a private, secure environment for multiple sharing subscribers 
without the addition of a separate POP '). 

Regarding Claim 13, Alles discloses the usage of routing in communications, (see 
Alles col. 2, lines 21-25; col. 6, lines 52-57) Alles does not disclose the usage of virtual 
routers in communications. However, Rao discloses the method and system of claim 2, 
7, 1 1 , wherein for each of a plurality of customers, a virtual router is fomried in the first 
processing system and is operably connected to a virtual router formed in the second 
system, (see Rao col. 2, lines 20-27) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize virtual router techniques for 
communications as taught by Rao. One of ordinary skill in the art would be motivated to 
employ Rao in order to provide strengthened services to accommodate increases in 
network traffic within a secure subscriber environment, (see Rao col. 2, lines 6-12) 

Regarding Claim 14, Alles discloses the usage of routing in communications. Alles 
does not disclose the usage of virtual routers in communications. However, Rao 
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discloses the method and system of claim 2,7, 11, wherein for each of a plurality of 
customers, a virtual private network is formed using a virtual router formed in the first 
processing system and operably connected to a virtual router fomned in the second 
system, (see Rao col. 2, lines 20-27; col. 2, lines 35-37: virtual router, virtual private 
network) 

Regarding Claim 15, Alles disclose a plurality of processors with rotating connections. 
Alles does not disclose a ring configuration. However, deBoer discloses the method 
and system of claim 2, 7, 1 1 , wherein the connecting a plurality of processors in a ring 
configuration, (see deBoer col. 4, lines 22-37) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize a ring configuration for the connected 
plurality of processor as taught by deBoer. One of ordinary skill in the art would be 
motivated to employ deBoer in order to provide expanded and updated features and 
services to subscribers, (see deBoer col. 4, lines 12-17) 

Regarding Claim 16, Alles discloses the system of claim 1 1 , further comprising: a 
services management system that provides changeable provisioning of processor 
capacity among a plurality of customers, (see Alles col. 4, lines 3-6) 

Regarding Claim 17, Alles discloses services processing at the OSI layers higher than 
the network layer (i.e. application layer), (see Alles col. 4, lines 50-53) Alles discloses 
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firewall protection (see Alles col. 7, lines 62-61 ) for each of a plurality of customers. 
Alles does not specifically disclose processing of services at the application layer. 
However, Rao discloses the system of claim 1 1 , further comprising: a services 

* 

management system that provides processing at the application layer (i.e. such as 
routing ... indicated by Applicant) processing), (see Rao col. 21, lines 14-18) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize application layer processing for services as 
taught by Rao. One of ordinary skill in the art would be motivated to employ Rao in 
order to provide strengthened services to accommodate increases in network traffic 
within a secure subscriber environment, (see Rao col. 2, lines 6-12) 

Regarding Claim 18, Alles discloses the system of claim 1 1 , further comprising: a 
services management system that provides provisioning of processor capacity among a 
plurality of customers, wherein each customer's resources are isolated from those of all 
the other customers, (see Alles col. 3, lines 43-47; col. 3, lines 58^0) 

8. Claims 2 - 5, 7 - 10, 12 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Alles-DeBoer-Rao and further in view of Gamer (U.S. Patent No. 6,243,580). 

Regarding Claims 2, 7, 12, Alles discloses one or more processing processor, (see 
Alles col. 3, lines 24-28: initial processing by processing group (i.e. type)) Alles does 
not disclose one or more control processors or one or more access processors. 
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However, Gamer discloses the method and system of claim 1 , 6, 1 1 , wherein, to 
support a communications network, the plurality of processors groups or types includes 

ft 

one or more control processors and one or more access processors, (see Gamer col. 5, 
lines 27-30; col. 58, lines 36-40: control and access processors) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize one or more control processors and 
access processors in the processing of services as taught by Gamer. One of ordinary 
skill in the art would be motivated to employ Gamer in order to provide expanded and 
updated features and services to subscribers, (see Gamer col. 3, lines 63-67: "... 
System Engineering . . . subsystems, equipment and software which is needed to 
expand capacity to meet increases in traffic demands and to provide new features and 
services which become marketable to subscribers . . . ") 

Regarding Claims 3, 8, Alles discloses the usage of routing in communications, (see 
Alles col. 2, lines 21-25; col. 6, lines 52-57) Alles does not disclose the usage of virtual 
routers in communications. However, Rao discloses the method and system of claim 2, 
7, 1 1 , wherein for each of a plurality of customers, a virtual router is fomned in the first 
processing system and is operably connected to a virtual router formed in the second 
system, (see Rao col. 2, lines 20-27: virtual router) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize virtual router techniques for 
communications as taught by Rao. One of ordinary skill in the art would be motivated to 
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employ Rao in order to provide strengthened sen/ices to accommodate increases in 
network traffic within a secure subscriber environment, (see Rao col. 2, lines 6-12) 

Regarding Claims 4, 9, Alles discloses the usage of routing in communications, (see 
Alles col. 2, lines 21-25; col. 6, lines 52-57) Alles does not disclose the usage of virtual 
routers in communications. However, Rao discloses the method and system of claim 
2, 7, 1 1 , wherein for each of a plurality of customers, a virtual private network is formed 
using a virtual router formed in the first processing system and operably connected to a 
virtual router formed in the second system, (see Rao col. 2, lines 20-27; col. 2, lines 35- 
37: virtual router, virtual private network) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Alles to utilize virtual router techniques for 
communications as taught by Rao. One of ordinary skill in the art would be motivated to 
employ Rao in order to provide strengthened services to accommodate increases in 
network traffic within a secure subscriber environment, (see Rao col. 2, lines 6-1 2) 

Regarding Claims 5, 10, Alles discloses the method and system of claim 2, 7,11, 
wherein the connecting a plurality of processors in the ring configuration includes 
forming dual counter rotating ring connections, each connecting to each of the plurality 
of processors, (see Alles col. 3, lines 30-33) 



t 
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Conclusion 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kyung H Shin whose telephone number is (571) 272- 
3920! The examiner can nonnally be reached on 9 am - 7 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David A Wiley can be reached on (571 ) 272-3923. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Infonnation Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more infonnation about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

|c H S 

Kyung H Shin 
Patent Examiner 
Art Unit 2143 
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